Is there some reason the updates would not have made it to
security.debian.org yet? This is not the first time I've gone to upgrade a
package after receiving the DSA only to find out the updates are not
available yet.